This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/Ld1IptB75UF1wrERs5D-utW7pW8.roa File: Ld1IptB75UF1wrERs5D-utW7pW8.roa (raw, json) Hash identifier: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA= Subject key identifier: 2D:DD:48:A6:D0:7B:E5:41:75:C2:B1:11:B3:90:FE:BA:D5:BB:A5:6F Certificate issuer: /CN=f8648082f888d4097ac4cdba84660b930f75035f Certificate serial: 019B79EBD103A2272D5AD4BAC77F6971343A Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/Ld1IptB75UF1wrERs5D-utW7pW8.roa Signing time: Thu 01 Jan 2026 14:17:36 +0000 ROA not before: Thu 01 Jan 2026 14:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 91.241.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d1:03:a2:27:2d:5a:d4:ba:c7:7f:69:71:34:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f Validity Not Before: Jan 1 14:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ddd48a6d07be54175c2b111b390febad5bba56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:ca:7d:10:6b:71:16:af:b6:49:80:69:a3: 63:7a:e3:73:30:c0:6a:f2:43:97:d9:d3:aa:3c:bf: bb:1d:1d:9e:34:b1:81:95:22:52:11:be:47:f4:7d: 82:9f:99:a4:4b:bb:16:4c:f3:81:2e:da:80:9f:48: a2:08:31:a9:37:75:19:d7:ef:aa:ed:bb:e6:e6:f7: 35:17:92:f6:81:f0:37:09:35:42:15:4c:c6:1b:92: 3b:85:8d:52:b6:d2:15:aa:98:cd:da:5e:3d:2c:2f: 63:d8:ff:f1:6c:69:d8:3b:38:5c:f4:df:2f:7e:7e: 86:5d:1c:bd:8e:c6:f0:c3:2c:46:72:a1:49:de:31: 46:26:59:13:e4:37:7e:80:63:11:32:b8:b7:72:8c: 6d:fa:80:08:16:a5:8e:6c:f8:73:fd:aa:a2:38:7d: 6f:17:9c:df:e5:44:bf:40:34:1a:05:c3:c9:bd:1a: 9f:96:31:74:85:07:60:20:b5:2d:43:35:f2:7c:8c: 70:60:4d:3c:56:42:af:4c:f4:a4:91:85:37:6f:34: 83:b5:9a:02:7a:34:bb:b8:07:51:d4:d3:cf:d0:f1: a7:97:fb:ba:e6:40:89:53:01:d0:89:ed:63:ea:3a: b5:06:af:d4:8f:c8:3a:2d:05:6b:4c:0e:b7:e3:2e: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:48:A6:D0:7B:E5:41:75:C2:B1:11:B3:90:FE:BA:D5:BB:A5:6F X509v3 Authority Key Identifier: keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/Ld1IptB75UF1wrERs5D-utW7pW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.29.0/24 Signature Algorithm: sha256WithRSAEncryption 63:c8:99:0e:3d:ee:48:61:46:5b:18:97:dc:de:cf:2d:4b:0b: 49:eb:fb:92:be:78:b5:35:da:8e:6f:36:16:6a:de:8b:e7:6a: c5:3b:73:61:c0:10:8f:41:f5:83:ac:c7:23:85:e6:46:ea:d5: 9e:1d:8d:5b:55:9a:0e:5a:79:20:2e:38:4c:3f:56:b9:f1:52: aa:8b:77:57:58:3e:12:f7:31:86:e0:32:12:1b:a0:d9:b8:ab: 05:f8:0f:0b:ef:da:68:af:d1:e4:f9:17:77:59:b3:08:29:dc: 6d:e2:15:e4:e8:58:ef:b8:53:36:2e:52:42:28:ee:bc:ca:0d: 1c:31:c8:36:83:b6:bd:bd:ef:13:03:56:07:4b:6b:b9:8e:37: 83:bb:b9:b9:a2:c7:4a:7c:2e:4a:92:23:5a:3b:5e:7a:75:f2: 6d:61:be:7f:74:d4:ac:3c:9c:6e:1f:2f:77:87:23:8c:e9:bc: 2c:fb:b5:14:48:df:31:06:47:1d:e4:6e:17:f7:08:a8:63:a2: fd:81:50:9e:08:25:6d:04:28:c9:bc:cb:16:7f:be:68:eb:92: 8d:9b:15:0a:19:db:f6:2d:48:8f:a4:04:98:67:39:42:25:24: 4f:ee:ca:b0:4a:45:dc:fd:02:66:79:03:86:21:83:b1:e5:5a: 70:b8:67:19 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt569EDoictWtS6x39pcTQ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3 NTAzNWYwHhcNMjYwMTAxMTQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGRkNDhhNmQwN2JlNTQxNzVjMmIxMTFiMzkwZmViYWQ1YmJhNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EfKfRBrcRavtkmAaaNjeuNzMMBq 8kOX2dOqPL+7HR2eNLGBlSJSEb5H9H2Cn5mkS7sWTPOBLtqAn0iiCDGpN3UZ1++q 7bvm5vc1F5L2gfA3CTVCFUzGG5I7hY1SttIVqpjN2l49LC9j2P/xbGnYOzhc9N8v fn6GXRy9jsbwwyxGcqFJ3jFGJlkT5Dd+gGMRMri3coxt+oAIFqWObPhz/aqiOH1v F5zf5US/QDQaBcPJvRqfljF0hQdgILUtQzXyfIxwYE08VkKvTPSkkYU3bzSDtZoC ejS7uAdR1NPP0PGnl/u65kCJUwHQie1j6jq1Bq/Uj8g6LQVrTA634y49LQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFC3dSKbQe+VBdcKxEbOQ/rrVu6VvMB8GA1UdIwQY MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw LTNhZjlhNGIwYTg3My8xL0xkMUlwdEI3NVVGMXdyRVJzNUQtdXRXN3BXOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQwLTNhZjlhNGIwYTg3 My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb8R0w DQYJKoZIhvcNAQELBQADggEBAGPImQ497khhRlsYl9zezy1LC0nr+5K+eLU12o5v NhZq3ovnasU7c2HAEI9B9YOsxyOF5kbq1Z4djVtVmg5aeSAuOEw/VrnxUqqLd1dY PhL3MYbgMhIboNm4qwX4Dwvv2miv0eT5F3dZswgp3G3iFeToWO+4UzYuUkIo7rzK DRwxyDaDtr297xMDVgdLa7mON4O7ubmix0p8LkqSI1o7Xnp18m1hvn901Kw8nG4f L3eHI4zpvCz7tRRI3zEGRx3kbhf3CKhjov2BUJ4IJW0EKMm8yxZ/vmjrko2bFQoZ 2/YtSI+kBJhnOUIlJE/uyrBKRdz9AmZ5A4Yhg7HlWnC4Zxk= -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:30 2026 by rpki-client